Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031333133.roa
File:                     323830303a3730303a35373a3a2f34382d3634203d3e2031333133.roa (raw, json)
Hash identifier:          7m38IoyCmpSJ2NBonQtJHvN/BoltZ1e+5wmEDv6MC70=
Subject key identifier:   E5:D8:D7:D9:54:3B:77:83:90:73:2B:99:49:8A:CD:3C:1C:1F:5D:03
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       660D464B46BDB4860C78046ECC15F1EBDBA8B9E5
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031333133.roa
Signing time:             Fri 24 Jul 2026 19:35:10 +0000
ROA not before:           Fri 24 Jul 2026 19:30:10 +0000
ROA not after:            Fri 23 Jul 2027 19:35:10 +0000
asID:                     1313
IP address blocks:        2800:700:57::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 17:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:46:4b:46:bd:b4:86:0c:78:04:6e:cc:15:f1:eb:db:a8:b9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Jul 24 19:30:10 2026 GMT
            Not After : Jul 23 19:35:10 2027 GMT
        Subject: CN=E5D8D7D9543B778390732B99498ACD3C1C1F5D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:d2:7b:bb:96:97:8d:54:32:05:3d:aa:f2:
                    e7:f1:ae:4b:25:5e:a9:35:c7:57:59:17:56:ef:bb:
                    e0:fc:59:b5:69:57:66:c3:fb:f4:fb:50:86:24:17:
                    5d:28:a7:60:40:5a:3f:08:77:84:bb:19:37:b1:eb:
                    3d:56:de:3f:91:e6:96:aa:66:6b:0c:a9:be:a5:95:
                    2a:cb:fc:76:79:55:f9:af:f7:b5:60:19:0c:de:41:
                    66:52:fd:83:3a:32:f5:ec:00:06:f7:98:6a:4d:c3:
                    75:f3:fd:aa:47:b3:c4:23:5a:ab:68:8c:07:8c:a0:
                    58:03:74:2a:e7:e6:3e:69:52:be:78:1e:35:4f:41:
                    45:65:b2:db:53:3e:98:b3:30:7c:02:fc:7b:66:78:
                    b6:fb:a2:b6:31:05:44:68:66:9c:35:cc:07:47:48:
                    4e:72:19:bc:a8:96:13:3a:6e:3a:0d:19:a0:51:9a:
                    86:a9:a5:cc:d6:6f:ba:53:93:9e:84:6d:ac:5a:a0:
                    7b:5f:3a:8d:f8:c9:dc:da:94:9b:1a:a5:b7:f0:ac:
                    e8:7a:52:2b:68:5b:44:a2:f7:d3:eb:5e:83:a6:fc:
                    88:69:8c:50:df:d0:48:e8:02:bc:96:89:7f:56:39:
                    22:83:60:28:00:03:6e:df:d8:0b:d1:b6:26:67:24:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:D7:D9:54:3B:77:83:90:73:2B:99:49:8A:CD:3C:1C:1F:5D:03
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:f2:04:0e:a9:8e:e5:98:41:6a:17:f4:c2:37:7c:c6:81:18:
         2e:d6:8d:32:72:af:ee:c7:90:17:0a:12:65:c7:f6:b4:0a:87:
         c5:28:09:7a:5d:55:53:67:b4:d6:e4:14:7e:83:08:68:c3:7a:
         1f:35:74:b3:cc:6a:c7:29:7b:f4:0c:39:5c:8f:2a:dc:e1:5b:
         71:04:93:fc:13:4b:15:0d:27:f1:df:c1:d0:b2:b4:85:1d:5c:
         14:44:ac:20:61:ce:98:e3:ac:90:c9:5b:d5:58:be:d6:aa:87:
         8b:3d:17:cf:27:5f:13:f5:6d:d0:3e:db:4e:43:f3:47:f0:dc:
         70:3c:e8:4e:d8:d6:80:51:57:ad:7e:3d:af:2d:0e:20:e6:a2:
         9b:05:61:ae:74:9e:ca:4a:28:2c:5f:51:1f:17:71:12:ae:4f:
         7a:9d:f9:9d:ec:62:58:0c:0a:32:d9:14:d7:af:36:a2:d5:75:
         bf:55:f0:b6:87:fe:e4:eb:d7:60:31:31:c4:c1:c0:a0:34:e7:
         8b:8b:d4:2d:67:8b:a8:70:64:6c:b0:64:71:e3:d3:4b:04:b8:
         31:f2:f0:87:9d:af:56:2b:13:73:fc:a3:91:be:ee:63:3c:ca:
         20:e7:71:62:e4:2b:c6:ff:32:92:e7:0d:aa:53:0f:43:b7:39:
         e2:67:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:44:56 2026 by rpki-client